Privacy policy
Last updated: [insert publication date]
This website is operated from Spain and personal data is processed under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD). This English version is provided for convenience; the Spanish-language version is legally authoritative.
1. Data controller
Maderas Caamaño, S.C., registered at O Rego, 4, Berdoias, 15128 Vimianzo (A Coruña), Spain, email maderascaamano@gmail.com, is the controller responsible for personal data collected through this website.
2. Data we process and purpose
Through the contact form we collect your name, email address, phone number, destination country, and the content of your message. This data is used exclusively to respond to your enquiry or quote request, and is not used for other purposes or shared with third parties except where legally required.
3. Legal basis
The legal basis for processing your data is the consent you give by submitting the form, and, where applicable, the taking of pre-contractual steps at your request (preparing a quote).
4. Data retention
Your data is kept for as long as necessary to handle your enquiry and, if a business relationship is established, for the period required by applicable commercial and tax legislation.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to maderascaamano@gmail.com, stating which right you wish to exercise and enclosing proof of identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe the processing does not comply with applicable law.
6. Recipients and international transfers
We do not share data with third parties except where legally required. As a business serving customers across Europe, contact details linked to an export order may, where necessary, be shared with freight forwarders or hauliers strictly for shipment logistics, within the European Economic Area.
7. Security measures
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or alteration.
This text is a standard GDPR-compliant privacy policy template and does not replace advice from a qualified lawyer or data-protection professional. We recommend it be reviewed before the site goes live.